2dd2d390dbaed8ee38fe50869df0d042d42d0f58b7ec9d6c58a986d28455a95c

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....up.dll

windows11-21h2-x64

MicrosoftS...nt.dll

windows11-21h2-x64

MicrosoftS...pt.dll

windows11-21h2-x64

MicrosoftS...or.dll

windows11-21h2-x64

MicrosoftS...or.dll

windows11-21h2-x64

MicrosoftS...or.dll

windows11-21h2-x64

MicrosoftS...el.dll

windows11-21h2-x64

MicrosoftS...er.dll

windows11-21h2-x64

MicrosoftS...ts.dll

windows11-21h2-x64

MicrosoftS...es.dll

windows11-21h2-x64

MicrosoftS...er.dll

windows11-21h2-x64

MicrosoftS...ns.dll

windows11-21h2-x64

MicrosoftS...er.dll

windows11-21h2-x64

MicrosoftS...on.dll

windows11-21h2-x64

MicrosoftS...ns.dll

windows11-21h2-x64

MicrosoftS...on.dll

windows11-21h2-x64

MicrosoftS...ns.dll

windows11-21h2-x64

MicrosoftS...ns.dll

windows11-21h2-x64

MicrosoftS...ly.dll

windows11-21h2-x64

MicrosoftS...tp.dll

windows11-21h2-x64

MicrosoftS...ns.dll

windows11-21h2-x64

MicrosoftS...on.dll

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Analysis

max time kernel
90s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20240709-en
resource tags

arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
submitted
23/07/2024, 15:04 UTC

Sharing

Copy URL

Twitter E-mail

Static task

static1

qr link

2 signatures

Behavioral task

behavioral1

Sample

Microsoft.6365217CE6EB4_102.2406.5001.0_x64__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Microsoft.6365217CE6EB4_102.2406.5001.0_x86__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Microsoft.6365217CE6EB4_102.2406.5002.0_x64__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Microsoft.UI.Xaml.Markup.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

MicrosoftSecurityApp/EcsClient.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

MicrosoftSecurityApp/Microsoft.AI.Agent.Intercept.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

MicrosoftSecurityApp/Microsoft.AI.DependencyCollector.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

MicrosoftSecurityApp/Microsoft.AI.EventCounterCollector.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

MicrosoftSecurityApp/Microsoft.AI.PerfCounterCollector.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

MicrosoftSecurityApp/Microsoft.AI.ServerTelemetryChannel.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

MicrosoftSecurityApp/Microsoft.AI.WindowsServer.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

MicrosoftSecurityApp/Microsoft.ApplicationInsights.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

MicrosoftSecurityApp/Microsoft.Bcl.AsyncInterfaces.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

MicrosoftSecurityApp/Microsoft.ConsumerSecurity.Client.OneAuthHandler.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Configuration.Abstractions.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Configuration.Binder.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Configuration.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

MicrosoftSecurityApp/Microsoft.Extensions.DependencyInjection.Abstractions.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

MicrosoftSecurityApp/Microsoft.Extensions.DependencyInjection.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

MicrosoftSecurityApp/Microsoft.Extensions.FileProviders.Abstractions.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Hosting.Abstractions.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Http.Polly.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Http.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Logging.Abstractions.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Logging.Configuration.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Microsoft.6365217CE6EB4_102.2406.5002.0_x86__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Microsoft.NET.Native.Framework.2.2_2.2.29512.0_x64__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

Microsoft.NET.Native.Framework.2.2_2.2.29512.0_x86__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

Microsoft.NET.Native.Runtime.2.2_2.2.28604.0_x64__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

discovery

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

Microsoft.NET.Native.Runtime.2.2_2.2.28604.0_x86__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

discovery

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

Microsoft.VCLibs.140.00_14.0.33519.0_x86__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

MicrosoftSecurityApp/Microsoft.Extensions.Configuration.Binder.dll
Size

24KB
MD5

6f269e943ce450ac71b9e9fd3a23e421
SHA1

8cda2bd606a81ce90487a2cfd0b68fc9ea5733ae
SHA256

d19a48adf887d942f5ac347e9ce68297e20199e0508586f051c40715905d83d6
SHA512

69749276eff20af43e27cecd5a6b8796a7e3621d68694a876aaf79061c037b12462b6216b9248b50b81247d05edd85d2bba497cfde4ba62108dff63825a5c3bd
SSDEEP

384:cOHlADXh/QUwDYqm1JjyNgZ75PMJBF5PmEaBWiEVGWSQHRN7WbdLIKlIjm:cy4xo5Da1u+63eEasq80dLl

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\MicrosoftSecurityApp\Microsoft.Extensions.Configuration.Binder.dll,#1
1⤵
PID:3100

Network

DNS

8.8.8.8.in-addr.arpa

Remote address:

8.8.8.8:53

Request

8.8.8.8.in-addr.arpa

IN PTR

Response

8.8.8.8.in-addr.arpa

IN PTR

dnsgoogle

No results found

8.8.8.8:53

8.8.8.8.in-addr.arpa

dns

66 B
90 B
1
1

DNS Request

8.8.8.8.in-addr.arpa

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

DNS Request

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.